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Ilsogon Corporation Announces 
Intercomm Integrity Enhancement 


TP Monitor for MVS Now Guarantees System Integrity 


New York, New York, October 31, 1990—Isogon Corporation has announced a major system 
integrity enhancement to Intercomm, its high-performance teleprocessing monitor for MVS main- 
frames. The enhancement centralizes all use of system key and/or supervisor state and enables 
Intercomm to conform to the stringent requirements of the U.S. government, as well as all system 
integrity requirements defined by IBM. 


Isogon can now guarantee that no part of Intercomm executes in a privileged state and that no 
unauthorized use of Intercomm can bypass normal MVS integrity and security checks. Any such 
breach with the enhancement installed and active will be treated as a severity 1 problem, noted Per 
Hellberg, Isogon’s Vice President of Technology. 


This new integrity enhancement was developed by Isogon working in cooperation with the 
Information Systems Security Officer of the US Department of Transportation. 


Availability 


The security enhancement is currently available to all Intercomm Release 10 users, and will be 
provided through normal maintenance procedures. 


About Isogon 


Headquartered in New York City, Isogon Corporation is a developer and marketer of mainframe 
products, specializing in MVS systems software, offering more than a dozen online and telepro- 
cessing products. In addition, Isogon’s microcomputer group develops and vends systems software 
and utilities for IBM-compatible PCs. 


Founded in 1983, Isogon also provides training and technical support services to more than two 
hundred Fortune 500 companies and government agencies. Over 290,000 people use Isogon’s 


teleprocessing products every day. 


For more information about Intercomm, contact Jerry Sindler, Vice President of Marketing, Isogon 
Corporation, 330 Seventh Avenue, New York, New York 10001, (212) 967-2424. 
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INTERCOMM INTEGRITY SVC ENHANCEMENT 
Fact Sheet 


Purpose: to remove the possibility of Intercomm executing in 
Supervisor State and/or Protect Key 0 in open code via an SVC 
(MRSVC) and to replace that SVC with a new SVC (IISVC) that 
will also prevent illegal access to the Operating System by 
non-Intercomm programs/users. 


Design: the Intercomm Integrity SVC may be implemented only under 
Release 10 of Intercomm at SM Level 2089 (or higher) for 
Systems executing under XA (MVS/SP2) or ESA (MVS/SP3 or SP4). 
The SVG (IGCICSVC) is a Type 2 reentrant SVC which requires 
the LOCAL Lock at entry. The SVC is provided in Load Module 
form only and must be relinked to SYS1.NUCLEUS or SYS1.LPALIB 
and defined to the Operating System. Functions previously 
performed in Intercomm using the MRSVC have been moved to the 
new SVC, which also contains code to validate the calling 
user and the function requested. The SVC also prevents 
accidental or intentional modification of protected storage 
not previously acquired by the SVC on behalf of the same 
user, and prevents modification of Link Pack Area modules via 
the SVC (except when they are used as Intercomm control 
blocks for Multiregion and ESS). 


Implementation: via XM’s to Release 10 to provide the new SVC Global 
IISVG (which the user must set to the desired SVC 
number), plus changes to affected modules to provide 
conditional assemblies of those modules which suppress 
execution of MRSVC-related code, and instead use a new 
macro to call the new SVC to perform the same 
function. 
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Guarantee: 


Advantages: 


INTERGOMM INTEGRITY SVG ENHANCEMENT 
Fact Sheet (Page 2) 


if the MRSVC is removed from the Operating System, then 
after applying the XMs as released and the IISVC global is 
set for the new SVC before assembly of modules affected by 
the XMs, and the new SVC (CIGCICSVC) is installed as 
released and as documented, then Isogon Corporation 
guarantees that the Operating System code and storage will 
not be affected by use of an Intercomm SVC. Illegal use 
of, or access to, the SVC will be signified by an address 
space abend with User Code 2048. This SVC is also 
guaranteed to conform to IBM and U.S. Government computer 
installation and usage security standards. After proper 
installation and use of the IISVG code, any apparant 
compromise of the Operating System caused by IISVG 
processing will be handled as a top priority problem upon 
receipt of all related system printouts, dumps, assemblies, 
etc. as determined by communication with the Isogon 
Intercomm staff. 


prevention of modification to store-protected Operating 
System functions and storage, except for storage directly 
under control of the SVC itself. Release of all acquired 
(by the SVC) protected areas at system end, cancel or 
abend. Consolidation of most MRSVC paired calls into one 
ITISvc call. 


